- [Presenter] We often rely on users
to observe best practice and try to avoid
following links and emails or downloading files
from unsafe sources or at least unknown sources,
which potentially might be unsafe.
But despite all that we do, it's entirely possible
that still threats will be faced and threats
might even in fact affect our user's devices.
That's where something like Microsoft Defender
provides that additional level of security one might
almost consider a last line of defense, perhaps.
So Microsoft Defender helps defend against malware.
Now that might include computer viruses,
computer worms, Trojan horses, ransomware, spyware.
So you can take certain steps to avoid malware
in the first place, and the potential disaster
that malware infections can cause.
First of all, obtain software only from reputable sources.
Like, for example, from the Microsoft store or the iOS store
rather than from just a website that purports to be
from a particular software vendor.
Keep your operating systems up to date.
So if you've got automatic updates turned on,
which you typically will have,
then your devices will be kept up to date
with antivirus and anti-malware patents and so forth.
So you should be in pretty good shape
but it's also important to apply
any cumulative updates on a monthly basis,
and possibly even some of the feature updates
might be important as well from a security standpoint.
Install and enable anti-malware software.
Well, you don't need to do that,
of course, because Windows 10, Windows 11
includes Microsoft Defender, so you can rely on that.
But if you want to use a third party
then you're welcome to do so.
Ensure your anti-malware definitions are up to date.
Well, that's one of the benefits of Windows Update,
of course, is that it does keep the definitions up to date.
Be cautious and be suspicious.
Try to educate your users about this.
It is difficult. We're all busy.
If something arrives in our inbox
and it looks legitimate and we were sort of
semi-expecting it, then we might react to it.
So always assume that something
might be not what it appears to be.
And then you've got these additional protections to help.
Let's go through a short demonstration now.
We'll run through how to detect malware and remove it,
how to perform a quick scan,
and how to perform a custom scan.
I'm signed into a Windows 11 Enterprise computer
and my user has inadvertently downloaded a file.
In this case, a virus test file.
Should have been fairly obvious that
that was not a good thing to have done, but anyway.
Let's open up that file and make it
not something we want.
This just simulates a virus so that we can detect it.
So if I save that file away, close it,
and then attempt to open the file.
Operation could not be completed
'cause the file contains a virus
and Windows Security notifies us
straight away that there's a problem.
We can now take action on that
or dismiss it if we weren't too concerned.
It switches to the Windows Security app
and we can see that we've got a significant problem.
This would be the point at which hopefully
your users would reach out to IT support.
It seems to have dealt with that already
but we can just take a look at protection history here.
The threat has been quarantined.
So it didn't wait for us to take action,
it's already isolated the file.
We can now choose some actions here
so we can get some more details and then, if we want,
we can restore the file 'cause we think it's safe.
Obviously not a terribly good idea.
In this particular instance it wouldn't make
any difference, it's only a simulation.
Or we can remove the file, which would
obviously be the recommended thing to do.
So that action's now being performed.
So we've always got real-time monitoring going on
in Windows with Microsoft Defender,
and it's quick to act, it's quick to notify,
and then provides you with the available options.
But meantime, the risk is isolated, quarantined.
From time to time it's maybe worth
visiting Windows Security and selecting
the virus and threat protection tab,
and then checking that your virus and threat protection
settings are what they need to be.
Click on manage settings here.
Make sure real-time protection is on,
make sure cloud-delivered protection is on,
and automatic sample submission is on,
which is helpful to Microsoft to help protect others.
If you need to perform a scan,
and I do this from time to time,
and in fact you are prompted by Windows
to do this from time to time, you can quickly perform
what's conveniently called a quick scan.
Just click the button and off it goes,
and it scans those common areas that might
typically be expected to be the target
of malicious software, malicious code.
And then we'll come back with some sort
of report if there's a problem.
I'm going to click cancel there.
I can also go on to configure
a specific scan, a custom scan.
I can choose the options available here.
I can do a quick scan from here
but I can also do a full scan of everything,
which could take an extended period, or a custom scan here
and then choose what it is that I want to scan,
which folders I want to scan, which files I want to scan.
Particularly useful if you've, for example,
downloaded some files from a website and you want to
check 'em out to make sure that they're secure.
I mean, I'm not recommending you start
downloading content from any old website,
but in a legitimate situation where perhaps
you're downloading a driver from a manufacturer,
pretty good idea just to make sure that all is well.
The drivers, of course, will be digitally signed
but it's important to make sure that they are also safe.
That's why in fact, it's a pretty good idea
to use Windows Update to deliver driver updates
so that you don't need to be downloading them
and checking them this way, they're already assumed
to be safe because they're being delivered by Microsoft.
In the demonstration, you learned
how to detect and remove malware,
how to perform quick and custom scans.